Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: 1ZkOiz7FuukUYQ1Xkhl0zzkw5JQ0FF2v8D9/m8XF5xU=
Subject key identifier: 32:99:C6:7C:B8:3A:6C:21:D4:9D:42:77:9C:AC:CD:A7:E0:0D:76:4E
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 0194BC04E3AA61FDCECA449E1E1D1924D370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 077E
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: lC1gcrY9cn1bev/MporAJEjU82sJXx1MpgrFElJQdwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:aa:61:fd:ce:ca:44:9e:1e:1d:19:24:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=3299c67cb83a6c21d49d42779caccda7e00d764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:99:aa:aa:56:76:b3:b3:85:42:7d:b2:ce:
c5:a9:c0:35:2f:41:fa:69:28:4a:8e:9a:e8:42:de:
59:31:de:e3:00:69:a6:de:ed:e3:c1:b9:2a:d8:f9:
42:fd:68:09:18:d0:b9:67:eb:fc:b4:aa:de:35:6a:
fd:bb:b3:da:c3:ab:98:bc:a8:a6:fd:17:86:4d:7e:
37:a5:3e:96:95:97:14:cc:fe:80:96:38:6a:cb:5e:
d9:a6:0d:c4:9a:25:3d:a1:61:3d:bf:ff:3d:54:c1:
e6:af:b8:5a:80:ea:1c:3c:9b:d0:ec:66:51:84:fc:
cb:83:dc:dc:45:0a:60:2f:a2:0e:d2:7e:56:53:c9:
a0:ab:ef:0a:a1:bb:61:d3:d6:2e:77:16:ba:98:e5:
68:1c:41:cc:f7:32:57:0f:d2:7b:32:3b:1d:c2:47:
05:ba:44:eb:ec:39:52:37:57:f6:5d:60:da:28:8a:
99:b7:4f:c0:5f:9c:3b:90:d6:b2:c8:61:86:3b:ce:
5e:67:b3:c2:63:da:19:9d:30:04:dc:d8:e5:cf:36:
fa:26:02:42:b0:54:52:ce:67:54:58:e8:a6:ef:11:
a0:e5:d3:18:8f:65:8b:b3:aa:9c:92:1f:8e:19:36:
f9:c1:f2:6e:e8:b5:84:1f:3c:47:73:6e:2a:02:bf:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:C6:7C:B8:3A:6C:21:D4:9D:42:77:9C:AC:CD:A7:E0:0D:76:4E
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:b7:79:31:9c:fa:6b:b9:56:a3:70:f2:b6:a2:e8:16:02:64:
99:ac:fb:2f:59:1d:ce:0e:b2:b4:c4:ec:e3:57:26:d0:f4:9f:
fb:2a:c2:e7:9c:85:64:5a:9a:e5:36:56:a7:24:9a:dc:37:ba:
5e:ca:da:0f:a4:f2:b4:d8:c2:6b:50:62:ca:2c:7f:e1:59:dc:
9e:e0:c9:7e:b6:c8:68:42:98:2b:df:e2:df:db:80:52:06:30:
3c:6c:40:39:85:3a:7d:a8:42:94:17:ae:24:83:da:33:99:51:
2a:57:d2:2d:f3:f8:f5:09:08:3c:38:cb:b8:07:3c:1b:a5:5d:
9a:84:be:13:98:5c:17:6f:e6:5c:80:bb:75:76:4d:71:65:e4:
2b:0e:5a:f3:b5:71:99:ab:b4:33:36:d4:10:ae:d7:9d:ac:71:
1f:60:aa:35:76:cc:63:e9:97:ae:4f:d8:20:29:53:b1:af:2a:
36:f2:1f:bb:80:e3:ed:b1:31:15:e0:02:b7:56:5c:00:46:f6:
df:81:55:ca:90:a6:88:44:6a:08:2e:a2:54:3d:64:7b:f0:c1:
5d:9a:47:78:ce:82:6a:a3:68:17:01:3e:c7:2f:c0:0b:71:8a:
c4:64:37:74:8e:f5:6a:ce:9c:ad:29:88:cd:a3:fb:ad:1b:30:
50:66:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client